brainwit.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bf:8c:38:31:70:b2:65:ee:5e:c8:5e:1e:ec:42:6c:4b:21 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=brainwit.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bf:8c:38:31:70:b2:65:ee:5e:c8:5e:1e:ec:42:6c:4b:21Serial Number (int): 326517173567980788973387071184331021765409
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4d:dc:e9:25:97:a2:08:30:2a:ed:f1:8e:5d:9a:57:92:7f:59:86:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 24:c1:b2:8d:94:ae:09:ce:f6:99:d9:5e:e0:4f:4b:69:15:6a:17:df
Fingerprint (sha256): c0:c9:0b:b7:92:70:6c:2c:99:d8:9c:84:cf:31:32:b7:69:a5:8e:38:f5:60:09:99:b5:eb:33:e3:2e:d5:bf:a9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate brainwit.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for brainwit.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
brainwit.com
Other certificates including the domain name brainwit.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for brainwit.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgISA7+MODFwsmXuXsheHuxCbEshMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTIwMTA0MTdaFw0y MDAzMTEwMTA0MTdaMBcxFTATBgNVBAMTDGJyYWlud2l0LmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBALugGU12QaX2A9uR2lVy7I/DYg0lvHrzKU1J JJjcBAl7fymzCk6EA5EigdxIMNmzPIABdCOiz4/dpA0j9eMJ7f73zTBdxtEq1IE8 dA8Q/HAHL00yHjKAkV6GkMhnB/0vzJ1C+Kyn86uHFEisBcRaG3waA81kVbaSGd1a Te0hRG60f6WpeFO2MRC6tx8VkI3C++bfd4f6PXhnFeoPFUK9iQPBwm74rxlKGab7 EwOpyhqMA9/+y1nejF/10OncCfhdDB6UHoru3W8IBsWqFtjMdYoBGXdRMIvCdb+k N/DMjC0h4XB1hm2yZk32Lsa71w2TbCsg0JX3LRNGeyR7oWcHfjeicJIGFvKdlLl6 ApDZN9r5LLtlG+LYlQIEtKfZmF7hVMzzjjvoHw9A+DkPLRGrFa2hAEhpp0CRo4YW VfrhD0ALhkaAEkVzlNLVG1AMw7plyfLyzvT7eZ9UURyxBKeMYcN4ZKDL2qOjJGQb 9FpRXirkAJ6wzk2FUZw1okQtQoXU8mu/Kj5fKkpThuQvuu1j0JFOy2+hJj4YiRWk KeKIAELjanx+mVAXSbiyOrF7WeyoawBEiEaqklaoRsJ3dEJymAJS9ZekA9Jf6PgX qJTZIKn7HCgwlIjl0QBurLPYjWX7cRuBpWpUhlSZrM9bw1hO6fD4k6N+aC4H2zD+ 1xBvcRqHAgMBAAGjggJhMIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFE3c6SWX oggwKu3xjl2aV5J/WYZCMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMYnJhaW53aXQuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw AHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFu99mCbwAABAMA RzBFAiBRbzjBImjdB3YVbTL+HikwkXnrbiUJMA5pTRTZKgpQ0AIhAJ4e8vQ8gNmB qXeZ6rJJYUlftg7Wlgu2OBEjAN93WHu7AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkC wQApBo2yCJo32RMAAAFu99mDpAAABAMARzBFAiApcmZC1f6GTiiXNx82Dmd58pNO p8WEx3Ijm6oGE+10zwIhAKSEiX0XNPLiJZqCbJ13nSYvR3gzHSlHKJryOz4nQS86 MA0GCSqGSIb3DQEBCwUAA4IBAQA+ErgAqqgsX/zuCKzBtQwoBgkApwqoylkDnR7P mI/ce/b6sMc2oYm4QCWo/iN8DyxUsFKOOcAtJDzoCJscoWVLTSXfdhuBUoDBWf9y oGkGfiYQ7h/iQhedd/fZlFen5KLDYLDC7aRMNqPa7LJebLKzl3Ch18e2G0UXfTuG NJ3X4RO0KxuAlSQ3nRmQQ8jinHFVKwhrG56EZwa2TPF3fWmQ43Ve+HGcehSX2Zqi XtVJdpq5ZDn9kYRB5/4PxON/PVuE+uMN8Ma9Vv6r6o9hnCDu3q/Sd+O7860/xlKl mKyFDwO/nTmmCZReqrPXzlR+8AR6zE9VnFkk1x+FoOPOPITn -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu6AZTXZBpfYD25HaVXLs j8NiDSW8evMpTUkkmNwECXt/KbMKToQDkSKB3Egw2bM8gAF0I6LPj92kDSP14wnt /vfNMF3G0SrUgTx0DxD8cAcvTTIeMoCRXoaQyGcH/S/MnUL4rKfzq4cUSKwFxFob fBoDzWRVtpIZ3VpN7SFEbrR/pal4U7YxELq3HxWQjcL75t93h/o9eGcV6g8VQr2J A8HCbvivGUoZpvsTA6nKGowD3/7LWd6MX/XQ6dwJ+F0MHpQeiu7dbwgGxaoW2Mx1 igEZd1Ewi8J1v6Q38MyMLSHhcHWGbbJmTfYuxrvXDZNsKyDQlfctE0Z7JHuhZwd+ N6JwkgYW8p2UuXoCkNk32vksu2Ub4tiVAgS0p9mYXuFUzPOOO+gfD0D4OQ8tEasV raEASGmnQJGjhhZV+uEPQAuGRoASRXOU0tUbUAzDumXJ8vLO9Pt5n1RRHLEEp4xh w3hkoMvao6MkZBv0WlFeKuQAnrDOTYVRnDWiRC1ChdTya78qPl8qSlOG5C+67WPQ kU7Lb6EmPhiJFaQp4ogAQuNqfH6ZUBdJuLI6sXtZ7KhrAESIRqqSVqhGwnd0QnKY AlL1l6QD0l/o+BeolNkgqfscKDCUiOXRAG6ss9iNZftxG4GlalSGVJmsz1vDWE7p 8PiTo35oLgfbMP7XEG9xGocCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 326517173567980788973387071184331021765409 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 01:04:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 01:04:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brainwit.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765444793359072845303699406168323508950735013409142647743874184077620930659866127434824297254003377745127032153235421238916844110460334141690455996611910930732547379051684841093880354778823325381364249356780000453197818156319118712749613595942669883497048332119728395966372609093834206844891888916863572017421596606771888963336242663335973548715436162258871312639739610822887410153201337932781907066583693969763047943106017880246303039719312762906821266001625563422436106451962817799081532046547863661660135602083995191306787903253182511888106282486751301512518471671354936321939925721400364723996609947832815166201387473689337248482684805992153772263660884300349646067365729903674720000671063087054832920066905366130572274439042944745932871705269082861074409447188308894740952977947801596290105086412317496871489618490665367806940131875920401169936133684433080057557730441563395286943391650814000265390777852515276165676731262422332675781518870991515513916298221894670322098555564918814935821306045109195429513893929375753231208821330941049666182735925417810876836216126381785634921941877405323881468851920090761932032825580373564030780063107900501247537700086961932634352186202740233266251485227708822812620948761996628212222859911 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4ddce92597a208302aedf18e5d9a57927f598642 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainwit.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef7d9826f00000403004730450220516f38c12268dd0776156d32fe1e29309179eb6e2509300e694d14d92a0a50d00221009e1ef2f43c80d981a97799eab24961495fb60ed6960bb638112300df77587bbb0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef7d983a40000040300473045022029726642d5fe864e2897371f360e6779f2934ea7c584c772239baa0613ed74cf022100a484897d1734f2e2259a826c9d779d262f4778331d2947289af23b3e27412f3a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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